Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: OQ0kIwJA4mWl8D89NildLJ2oXaktwJ4gJi4Ta7YsL+s=
Subject key identifier: 54:0F:B2:07:BD:D0:73:06:AD:12:F7:F3:CC:F3:16:D7:B7:CD:D2:B6
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019D28BB64EAF7CF641E1366266EBC4809AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:01:02 +0000
Manifest this update: Thu 26 Mar 2026 06:01:02 +0000
Manifest next update: Fri 27 Mar 2026 06:01:02 +0000
Files and hashes: 1: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
2: aI-ahOCwvF9dDyH09tBe3WnKiGg.roa (hash: W4z3ROiXmDdwVFy1xkMGSOsTs29f9yswRvpywgw4Gjk=)
3: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
4: fL9-5NNFmNXeaEJzQdcv1aJZxaE.roa (hash: vgxMoBNi3xBe1kEG9Dep1UcVzUmrFFhkaO0RcMn0W+o=)
5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: sWqmbvqksBIXWXN+cihsjqKS6Y2HFjgrCUBhJZ9mM70=)
6: q4J7inXLdfvTxzgZzcdEl_n6nio.roa (hash: tU27AK3PO1qj8TjiCSuyTiU7iIickoD0PNPU49OzhWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:64:ea:f7:cf:64:1e:13:66:26:6e:bc:48:09:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Mar 26 06:01:02 2026 GMT
Not After : Mar 27 06:01:02 2026 GMT
Subject: CN=540fb207bdd07306ad12f7f3ccf316d7b7cdd2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:c4:13:e8:96:7b:50:80:c1:4c:5c:b9:42:
76:04:8a:bf:20:e6:a9:6f:f1:f0:17:7f:af:d1:89:
1c:ce:1a:47:b6:61:51:86:c5:57:44:02:ad:14:a7:
91:76:8e:70:90:9c:97:8b:7e:61:a7:21:a7:b5:ee:
38:10:fc:06:9d:17:c5:6c:a7:eb:23:63:9e:90:a8:
07:23:70:a9:01:6c:26:6e:2d:be:a0:47:47:dc:3e:
46:9a:c0:70:43:0b:7e:04:c7:02:9e:05:e3:a2:8b:
c4:20:ac:a1:80:42:11:94:0d:fa:a0:78:09:ef:4e:
a9:7c:b1:26:8f:d4:31:1a:50:f9:fe:56:df:d8:65:
20:d1:87:a9:41:9d:59:07:ce:cb:bd:e9:d1:05:5e:
94:38:23:13:f9:a3:0c:21:1c:24:35:2b:af:38:0e:
50:c1:45:46:9d:68:6a:c1:22:6a:7f:02:fc:35:ef:
5a:7d:b0:da:c1:01:25:91:30:ef:f9:ca:6c:1a:e4:
00:60:e5:dc:ce:bd:36:ab:81:ca:09:b2:32:41:b3:
35:29:b7:e9:ec:77:8e:79:39:14:9b:a2:91:00:0e:
d1:ea:16:21:79:6c:66:6b:da:5d:96:3b:08:16:a3:
65:64:be:e6:f6:d8:b3:23:08:50:a0:71:24:b7:f7:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0F:B2:07:BD:D0:73:06:AD:12:F7:F3:CC:F3:16:D7:B7:CD:D2:B6
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1f:6c:d3:39:db:d3:fa:f2:33:9c:14:e4:e7:f5:57:87:27:
6e:07:1d:9f:b4:98:12:f4:24:2f:e0:79:f0:06:84:cf:c3:82:
62:af:83:85:84:f3:b6:3d:26:c5:0a:76:0b:c8:28:e5:f5:e8:
2e:dd:6f:3c:9e:76:2b:a6:54:cd:d1:84:d2:03:35:1c:8f:0c:
c8:02:fc:5b:b6:d4:df:dc:68:29:aa:c0:14:42:b8:07:84:a7:
42:58:3a:59:86:96:26:7f:72:96:c5:b3:24:f7:4c:59:0f:47:
1d:94:44:eb:e8:86:41:54:96:44:36:f0:0a:8c:c1:49:44:32:
d4:26:5f:12:9f:24:be:d0:9e:04:66:9c:e8:12:bd:e7:c1:2a:
46:93:61:87:0c:b5:12:d4:e8:63:bc:c7:c4:87:0b:12:42:88:
b6:a2:19:4e:5d:27:78:ba:9e:01:97:e6:d0:36:36:71:61:5a:
5c:f7:d0:15:4f:27:1b:a0:a5:13:54:e6:ab:ff:b2:8b:f0:62:
65:c8:a1:06:cf:43:b3:55:33:ec:48:b8:0c:d2:05:9e:b1:4c:
db:0c:8c:92:41:2b:a4:b7:8a:bc:0d:79:f8:91:f7:81:5e:39:
a1:15:35:4d:ff:53:1f:bc:c3:3b:11:ff:20:36:08:9b:b0:08:
20:80:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:49 2026 by rpki-client